API with JWT Authentication & Refresh Token